Amendments to the Claims 



Upon entry of this amendment, the following listing of claims will replace all prior 
versions and listings of claims in the pending application. 

IN THE CLAIMS 

Please amend claims 24, 25, 29, 34, 35 and 39 as follows: 
1-23. (Cancelled). 

24. (Currently amended) A method of enrolling networked resources via an enrollment 
system communicating with an enrollment administration system permitting enrollment based on 
enrollment rules stored in an enrollment database, the method comprising: 

receiving, by an enrollment administration system executing on a computing machine, a 
request from an enrolhnent system communicating with the enrollment adminisfration system, to 
enroll a networked resource for a user, the request comprising at least an identification of the 
user and an identification of the networked resource , the networked resource comprising one of: 
a desktop and an application program : 

identifjdng, by the enrollment administration system, one of a plurality of a a enrollment 
rules stored in an enrollment database, tbe -each rule identifying a group of users permitted to 
enroll tbe-a_networked resource, the identified rule identifying a g roup of users comprising at 
least the user; 

enrolling, by the enrollment administration system, the networked resource for the user 
responsive to (i) authenticating the identity of the user and (ii) determinin g, based on the 
identified rule, that the user has permission to enroll and use the networked resource , the 
enrollment allowing a user to later access the networked resource from a remote client as if the 
enrolled networked resource locally resides on the client ; 

providing, responsive to the enrollment, a remote access system to the user to later access 
the networked resource from the remote client: 

adding, by the enrollment administration system responsive to the enrollment, an 
enrollment record of the networked resource for the user to an enrollment database: 
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requesting, by the user via the remote access system, remote access to the networked 
resource; 

verifying, by the remote access system, the identity of the user responsive to the request; 

determining, by the remote access system in communication with the enrollment database, 
that the user was previously enrolled in the requested network resource; and 

granting the user access to the networked resource responsive to the verification and 
determination . 

25. (Currently amended) The method of claim 24 wherein fee -remote access to the n etworked 
resource uses a remote display protocol is a comput e r . 

26. (Previously Presented) The method of claim 24 wherein identifying an enrollment rule 
further comprises: defining a plurality of groups of users; defining a plurality of groups of 
networked resources; and specifying a group of networked resources that a group of users is 
permitted to enroll. 

27. (Previously Presented) The method of claim 24 wherein enrolling the networked resource 
is disallowed from a remote console. 

28. (Previously Presented) The method of claim 24 wherein enrolling the networked resource 
requires the user to enroll from a console physically attached to the networked resource. 

29. (Currently amended) The method of claim 24 wherein granting access to the networked 
resource further comprises granting access to fee-a^desktop of fee-a.networked resource 
computing device . 

30. (Previously Presented) The method of claim 24 wherein the enrollment administration 
system is a network application. 

3 1 . (Previously Presented) The method of claim 24 further comprising determining, by a 
locator system, a location of the user. 
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32. (Previously Presented) The method of claim 3 1 further comprising enrolling the 
networked resource based on the location of the user. 

33. (Previously Presented) The method of claim 24 further comprising denying access to the 
networked resources upon determining the user had not previously successfully enrolled the 
networked resource via the enrollment administration system. 

34. (Currently Amended) A system for enrolling networked resources via an enrollment 
system communicating with an enrollment administration system permitting enrolhnent based on 
enrollment rules stored in an enrollment database, the system comprising: 

an enrollment administration system executing on a computing machine and 
communicating with an enrollment system, the enrollment administration system: 

receiving a request from the enrollment system to enroll a networked resource for 
a user, the request comprising at least an identification of the user and an identification of 
the networked resource , the networked resource comprising one of: a desktop and an 
application program . 

identifying an- one of a plurality of enrollment rules stored in an enrollment 
database, #te -each r ule identifying a group of users permitted to enroll the-a_networked 
resource, the identified rule identifying a g roup of users comprising at least the user, 

enrolling the networked resource for the user responsive to (i) authenticating the 
identity of the user and (ii) determining , based on the identified rule, that the user has 
permission to enroll and use the networked resource , the enrollment allowing a user to 
later access the networked resource from a remote client as if the enrolled networked 
resource locally resides on the client. 

providing, responsive to the enrollment, a remote access system to the user to 
later access the networked resource from the remote client; 

adding, responsive to the enrollment, an enrollment record of the networked 
resource for the user to an enrollment database: 

receiving, via the remote access system, a request by the user for remote access to 
the networked resource , and 



U.S.S.N.: 10/683,544 
BOST 1860797.1 



Page 4 of 10 



Atty. Docket No.: 099011-0428 
Client Ref. No. CTX-082 



granting the user access to the networked resource responsive to (i) verifying, by 
the remote access system, the identity of the user responsive to the request and (ii) 

determining, by the remote access system in communication with the enrollment 
database, that the user was previously enrolled in the requested network resource . 

35. (Currently Amended) The system of claim 34 wherein remote access to t he networked 
resource uses a remote display protocol is a comput e r . 

36. (Previously Presented) The system of claim 34 wherein the enrollment administration 
system identifies an enrollment rule by: defining a plurality of groups of users; defining a 
plurality of groups of networked resources; and specifying a group of networked resources that a 
group of users is permitted to enroll. 

37. (Previously Presented) The system of claim 34 wherein the enrollment administration 
system does not have permission to enroll the networked resource from a remote console. 

38. (Previously Presented) The system of claim 34 wherein the enrollment administration 
system requires the user to enroll from a console physically attached to the networked resource. 

39. (Currently Amended) The system of claim 34 wherein the enrollment administration 
system grants access to ^le-a^desktop of a.^ networked computing device 

40. (Previously Presented) The system of claim 34 wherein the enrollment system is a 
network application. 

4 1 . (Previously Presented) The system of claim 34 fiirther comprising a locator system 
determining a location of the user. 

42. (Previously Presented) The system of claim 41 wherein the enrollment administration 
system enrolls the networked resource based on the location of the user. 
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43. (Previously Presented) The system of claim 34 wherein the enrollment administration 
system denies access to the networked resources upon determining the user had not previously 
successfully enrolled the networked resource via the enrollment administration system. 
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